Skip to content
October 29, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Claude Agent Alignment Failure Exposed in AISI Incident Claude agent alignment failure diagram showing Claude Mythos 5 cybersecurity evaluation breach
  • Technology

Claude Agent Alignment Failure Exposed in AISI Incident

Do Son October 27, 2026 0

UK AISI revealed a Claude agent alignment failure where the autonomous AI submitted malicious code to real GitHub projects during cybersecurity tests.

Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts INTERPOL_1200x720_1792474169MWthkn6AkO
  • Press Release

Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts

cybernewswire October 27, 2026 0
Torrance, United States / California, 27th October 2026, CyberNewswire
Read More Read more about Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts
Free APIs for the Defense Sector: 7 Useful Options for Data and Intelligence tech
  • Technique

Free APIs for the Defense Sector: 7 Useful Options for Data and Intelligence

Do Son October 27, 2026 0
Modern defense teams work with huge amounts of information, from satellite imagery and weather observations to mapping,...
Read More Read more about Free APIs for the Defense Sector: 7 Useful Options for Data and Intelligence
Microsoft Voluntary Buyout Program Targets 60,000 Staff Microsoft voluntary buyout program memo announcing severance options for eligible personnel
  • Technology

Microsoft Voluntary Buyout Program Targets 60,000 Staff

Do Son October 27, 2026 0

The Microsoft voluntary buyout program offers severance to 60,000 employees across four countries as the tech giant redirects capital toward AI computing.

Windows 11 CTL Update Refreshes Offline Certificates Windows 11 CTL update diagram showing offline certificate trust list deployment
  • Windows

Windows 11 CTL Update Refreshes Offline Certificates

Do Son October 27, 2026 0

Microsoft released a Windows 11 CTL update to refresh offline certificate trust lists and remove untrusted roots across air-gapped enterprise systems.

Denmark Ends Collabora Pilot in Blow to Open Source Denmark ends Collabora pilot evaluating open source alternatives to Microsoft Office
  • Technology

Denmark Ends Collabora Pilot in Blow to Open Source

Do Son October 27, 2026 0

Denmark ends Collabora pilot testing across its public sector after formatting errors disrupted case workflows, securing a quiet victory for Microsoft.

Apple iOS 27.2 Update Fixes 160 Security Flaws Apple iOS 27.2 update interface displaying Siri AI conversational memory and Find My integration
  • Vulnerability Report

Apple iOS 27.2 Update Fixes 160 Security Flaws

Do Son October 27, 2026 0

The Apple iOS 27.2 update enhances Siri conversational intelligence, integrates Siri Remote into Find My, and patches over 160 security vulnerabilities.

Windows 11 Universal Print Glitch Demands Manual Fix Windows 11 Universal Print error 0x80004005 troubleshooting diagram
  • Windows

Windows 11 Universal Print Glitch Demands Manual Fix

Do Son October 27, 2026 0

A persistent Windows 11 Universal Print bug breaks printer queues after OS upgrades, displaying error 0x80004005 and requiring queue reinstallation.

SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft SiriusQT RAT and Windows SiriusQT RAT HVNC attack architecture diagram
  • Malware

SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft

Do Son October 27, 2026 0

Group-IB analyzes over 280 samples of SiriusQT RAT. Discover how the Windows SiriusQT RAT uses HVNC, six persistence methods, and 100+ stealer targets.

Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning Armorsteal malware and Python Armorsteal malware SEO poisoning infection chain diagram
  • Malware

Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning

Do Son October 27, 2026 0

Zscaler uncovers an SEO poisoning campaign using fake Chocolatey and Massgrave sites to drop Armorsteal malware and Python Armorsteal malware modules.

CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface PHP2Shell added to CISA KEV catalog after confirmed RCE and suspected DPRK scanning
  • Vulnerability Report

CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface

Do Son October 27, 2026 0

CISA adds PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to the CISA KEV catalog after confirmed RCE and suspected DPRK-linked scanning.

Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones CoreGraphics zero-day CVE-2026-86950 exploited in the wild fixed in iOS 18.7.11
  • Vulnerability Report

Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones

Do Son October 27, 2026 0

Apple's iOS 18.7.11 fixes CVE-2026-86950, a CoreGraphics zero-day exploited in the wild, on older iPhones and iPads. Update now.

HashiCorp Patches Critical 9.9 CVSS Consul-k8s Authorization Bypass Vulnerability (CVE-2026-110720) HashiCorp consul-k8s vulnerability diagram showing authorization bypass for CVE-2026-110720
  • Vulnerability Report

HashiCorp Patches Critical 9.9 CVSS Consul-k8s Authorization Bypass Vulnerability (CVE-2026-110720)

Do Son October 27, 2026 0

Patch CVE-2026-110720 now. This 9.9 CVSS consul-k8s vulnerability enables a cross-namespace authorization bypass in ACL binding rules.

OpenMage Fixes 34 Flaws in Magento LTS, Including Critical OAuth CSRF OpenMage vulnerabilities including critical OAuth CSRF fixed in Magento LTS 20.19.0
  • Vulnerability Report

OpenMage Fixes 34 Flaws in Magento LTS, Including Critical OAuth CSRF

Do Son October 27, 2026 0

OpenMage fixes 34 OpenMage vulnerabilities in Magento LTS, including a critical CSRF flaw that hands out API tokens. Upgrade to 20.19.0 or 20.18.2.

Intel APX Windows 11 Toggle Unlocks CPU Efficiency Intel APX Windows 11 toggle architecture showing 32 general purpose registers and instruction execution
  • Windows

Intel APX Windows 11 Toggle Unlocks CPU Efficiency

Do Son October 27, 2026 0

Microsoft tests an Intel APX Windows 11 performance toggle in preview builds, doubling general-purpose registers for enhanced processor speed.

Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS PAN-OS Brotli vulnerability CVE-2026-111497 buffer overflow affects Palo Alto Networks firewalls
  • Vulnerability Report

Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS

Do Son October 27, 2026 0

Palo Alto confirms PAN-OS Brotli vulnerability CVE-2026-111497, a CVSS 9.2 buffer overflow in PAN-OS 12.2, 12.1 and 11.2. Install the hotfixes now.

Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities Breaking Identity Boundaries Zimbra Collaboration Suite vulnerabilities diagram showing Rapid7 research on CVE-2026-10632, CVE-2026-50057, and CVE-2026-93640
  • Vulnerability Report

Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities Breaking Identity Boundaries

Do Son October 27, 2026 0

Rapid7 disclosed 17 Zimbra Collaboration Suite flaws, including CVE-2026-10632 and CVE-2026-93640, allowing XSS and root privilege escalation.

Mautic 7.2.2 Patches Critical Remote Code Execution and SQL Injection Vulnerabilities Mautic vulnerabilities overview showing Mautic 7.2.2 fixes for CVE-2026-115188, CVE-2026-115189, and CVE-2026-115190
  • Vulnerability Report

Mautic 7.2.2 Patches Critical Remote Code Execution and SQL Injection Vulnerabilities

Do Son October 27, 2026 0

Upgrade to Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 CVSS RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs.

PoC and Full Details Released for macOS autofs Flaws Enabling Root Code Execution and Gatekeeper Bypass macOS autofs vulnerability CVE-2026-84568 root code execution and Gatekeeper bypass PoC published
  • Vulnerability Report

PoC and Full Details Released for macOS autofs Flaws Enabling Root Code Execution and Gatekeeper Bypass

Do Son October 27, 2026 0

PoC and details are public for CVE-2026-84568, a macOS autofs vulnerability enabling root code execution, and a Gatekeeper bypass. Update macOS now.

Tailscale SSH Vulnerability Enables Root Escalation Tailscale SSH vulnerability diagram showing Unix socket forwarding and privilege escalation to root
  • Vulnerability Report

Tailscale SSH Vulnerability Enables Root Escalation

Do Son October 27, 2026 0

A severe Tailscale SSH vulnerability allows attackers on authorized nodes to exploit Unix socket forwarding and escalate privileges to root access.

Apple Blocks eMudhra Certificates Over Weak Key Flaw Apple blocks eMudhra certificates across macOS and iOS security architecture diagram
  • Technology

Apple Blocks eMudhra Certificates Over Weak Key Flaw

Do Son October 27, 2026 0

Apple blocks eMudhra certificates across macOS and iOS after weak intermediate keys compromised trust, with CLI tool bundles slated for future updates.

Anthropic S-1 IPO Filing Targets Historic $2T Valuation Anthropic S-1 IPO filing documents outlining revenue trajectory and compute commitments
  • Technology

Anthropic S-1 IPO Filing Targets Historic $2T Valuation

Do Son October 26, 2026 0

The Anthropic S-1 IPO filing reveals $16.8B Q3 revenue, $750B in compute commitments, and a historic valuation target on Nasdaq.

❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-76418CVSS 8.6
    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-116690CVSS 7.5
    MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2026-101767CVSS 9.8
    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 28, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2025-49794CVSS 9.1
    A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when...
    📅 Updated: Oct 29, 2026
  • CVE-2026-114358CVSS 9.3
    This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in...
    📅 Updated: Oct 29, 2026
  • CVE-2026-32557CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BookingWP WooCommerce Appointments woocommerce-appointments...
    📅 Updated: Oct 29, 2026
  • CVE-2026-86384CVSS 9.8
    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release...
    📅 Updated: Oct 29, 2026
  • CVE-2026-57116CVSS 9.8
    PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface...
    📅 Updated: Oct 29, 2026
  • CVE-2026-48360CVSS 9.6
    Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result...
    📅 Updated: Oct 29, 2026
  • CVE-2026-42922CVSS 9.8
    A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request...
    📅 Updated: Oct 29, 2026
  • CVE-2026-114611CVSS 9.1
    OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to...
    📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.